DFIR Summit & Training

Summit: July 25 - 26, 2019Training: July 27 - August 1, 2019

The annual SANS Digital Forensics & Incident Response (DFIR) Summit is the most comprehensive DFIR event of the year, bringing together an influential group of experts, immersion-style training, and industry networking opportunities in one place.

GIAC Cyber Threat Intelligence Certification (GCTI)

GCTI marks a new standard in which analysts are taking the step to develop the analysis skills to help them think critically, amplify their technical knowledge and utilize this knowledge to be better prepared against cyber threats.

Limited Time Special Offer

SANS Institute's professional, online information security training platforms OnDemand and vLive allow you to complete world-renowned courses anywhere, at any time. Get a GIAC Certification Attempt Included or take $350 off OnDemand or vLive training for a limited time!

SIFT Workstation

Free VMware Appliance

An international team of forensics experts, led by SANS Faculty Fellow Rob Lee, created the SANS Investigative Forensic Toolkit (SIFT) Workstation and made it available to the whole community as a public service. The SIFT Workstation is a VMware appliance, pre-configured with the necessary tools to perform detailed digital forensic examination in a variety of settings.

The New DFIR Challenge Coins are here!

The SANS DFIR faculty are pleased to introduce the new DFIR Challenge Coins. These coins are created to recognize students who demonstrate exceptional talent, contributions, or who serve as leaders in the digital forensics profession and community.

Whether you're seeking to maintain a trail of evidence on host or network systems or hunting for threats using similar techniques, larger organizations are in need of specialized professionals who can move beyond first-response incident handling to analyze an attack and develop an appropriate remediation and recovery plan. Our DFIR Courses will teach you how to detect compromised systems, identify how and when a breech occurred, understand what attackers took or changed, and successfully contain and remediate incidents.
Read More

Every year the SANS Digital Forensics & Incident Response (DFIR) Faculty produces thousands of free content rich resources for the digital forensics community. These resources are aimed to provide you with the latest in research and technology available to help you streamline your investigations.
Our number one priority is to support the DFIR community by not only providing content to solve even the most difficult problems investigators face daily, but also provide an open forum for community mentoring, development and support. Read More

Developed by an international team of forensics experts, the SIFT Workstation is available to the digital forensics and incident response community as a public service. SIFT features powerful cutting-edge open-source tools that are freely available and frequently updated and can match any modern DFIR tool suite. Thousands of individuals download the SIFT workstation yearly and many organizations had found SIFT to be the key investigative suite to use during their investigations. Download it now

Keep up with the DFIR industry!

Follow us on social media or register for our Community List Service and Monthly DFIR Newsletter